General

  • Target

    2b130dabb505eb70e15d824705d76e28a11362b1a837983cb64bae03888a4f8a

  • Size

    205KB

  • MD5

    74420e7c3edcc31976baf932e4ae44b4

  • SHA1

    d7fdac84f178245c305f84721e01ee78dc9af26b

  • SHA256

    2b130dabb505eb70e15d824705d76e28a11362b1a837983cb64bae03888a4f8a

  • SHA512

    e407331d9805dde61789db1de9d9e46da56a4dcc5195377cb450622c29fba98cf286c7a861155635d3c4d18c59b07b671c1da5177db44f1cc1544fa6784060eb

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b130dabb505eb70e15d824705d76e28a11362b1a837983cb64bae03888a4f8a
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections